Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 96951 - In SquirrelMail trable with SSL/TLS
Summary: In SquirrelMail trable with SSL/TLS
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Jeremy Huddleston (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-06-24 09:04 UTC by toto
Modified: 2005-10-16 14:13 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description toto 2005-06-24 09:04:38 UTC
When i go to dilever mail via qmail i have a message:
_________
Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages:
error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number in
/var/www/localhost/htdocs/mail/class/deliver/Deliver_SMTP.class.php on line 57

Warning: fsockopen(): php_stream_sock_ssl_activate_with_method: SSL
handshake/connection failed in
/var/www/localhost/htdocs/mail/class/deliver/Deliver_SMTP.class.php on line 57

Warning: fsockopen(): failed to activate SSL mode 2 in
/var/www/localhost/htdocs/mail/class/deliver/Deliver_SMTP.class.php on line 57
_________

I think trable in format of header SSL (like SSL3 or SSL23 or ...)
Soft I used last from portage.
config of SquirrelMail:
SMTP Settings
-------------
4.   SMTP Server           : localhost
5.   SMTP Port             : 25
6.   POP before SMTP       : false
7.   SMTP Authentication   : cram-md5
8.   Secure SMTP (TLS)     : true


Reproducible: Always
Steps to Reproduce:
1.
2.
3.
Comment 1 toto 2005-06-24 09:09:12 UTC
    Many of SSL clients sends the first CLIENT HELLO with
    ssl2 format (0x80.....) because they don't know what
    version the server supports.
    In this first message, the client sends the version
    he wants to use (3 for SSL3), then the other exchanged
    messages are in the appropriate format SSL3 for V3,
    SSL2 for V2 etc....

    So in your server method configuration you must put:
      SSL_CTX *ctx = SSL_CTX_new (SSLv23_server_method())
    to correctely analyse the first client_hello message
    instead of 
      SSL_CTX *ctx = SSL_CTX_new (SSLv3_server_method())
    which i suppose you did.

i find in a google ]]
Comment 2 toto 2005-06-25 23:49:26 UTC
xmm 
I get install a "horde", and it's havn't this bug]] All ok, i think.
but SquirrelMail have it bug and it's suxx ]]
Comment 3 Jeremy Huddleston (RETIRED) gentoo-dev 2005-10-16 14:13:12 UTC
work out this problem with the squirrelmail devs upstream as it's not gentoo
specific.  I'll gladly include a fix if you can provide it.